Microsoft 365 Das modern Büro der Zukunft

Transcription

1 Microsoft 365 Das modern Büro der Zukunft DI. Harald Leitenmüller Chief Technology Officer 3. Digital Business Forum, 14. Sept Microsoft Österreich GmbH.

2 Cloud Principles Standardisierung Automatisierung Self Service

3 .it s time for something amazing 9/11/2017 <company name>- SUBJECT TO NDA OR PIA 4

4 1990 9/11/2017 <company name>- SUBJECT TO NDA OR PIA 5

5 2001 9/11/2017 <company name>- SUBJECT TO NDA OR PIA 6

6 2011 9/11/2017 <company name>- SUBJECT TO NDA OR PIA 7

7 Microsoft 365 Business

8 Bringing together best in class solutions. Office 365 Windows 10 Best of EMS Desktop Apps Word, Excel, PowerPoint, and more Online Services Exchange, OneDrive, Skype, Microsoft Teams Business apps Microsoft Bookings, Outlook Customer Manager, MileIQ 1 Everything in Windows 10 Pro 2 Plus Windows Defender Security Controls Windows AutoPilot Automatic Office apps deployment App protection for Office mobile apps Device Management for Windows 10 PCs Selective wipe of company data [1] Available in US, UK, and Canada only [2] Includes upgrade benefits for Windows 7 or 8/8.1 Professional licensed PCs to upgrade to Windows 10 Professional

9 2 min

10

11 Building an Integrated Security Experience Industry Partners Antivirus Network INTELLIGENT SECURITY GRAPH CERTs Cyber Defense Operations Center Malware Protection Center Cyber Hunting Teams Security Response Center Digital Crimes Unit PaaS IaaS SaaS Identity Apps and Data Infrastructure Device

12 1 2 Readable customer data disclosed to a third party Customer data permanently lost AND Threat Tree Customer data disclosed to a third party Customer data is readable Disruption of cloud service Threat Tree 2 Threat Tree Accidental data spillage Data disclosure due to law enforcement / intelligence request Deliberate compromise leading to disclosure of customer data Legend: Threat Tree 3 Root Risk Event Conditions Cloud service provider (CSP) infrastructure compromised Customer infrastructure compromised Compromise of systems outside cloud provider or customer control Technical Controls Threat Tree 4 Threat Tree 5 Threat Tree 1 : Overview Process Controls Consumer Applied Control

13 1.2 Customer data is readable Threat Tree 1.2 : Customer Data is Readable Data is not encrypted Encryption keys become known Data is weakly encrypted Encryption keys lost by the cloud provider Encryption keys lost by the customer Cryptographic standards AND AND Encryption at Rest Encryption in Transit Local Data Encryption Cloud provider infrastructure compromised Data Classification Policy on Use of Cryptographic Controls Link: Threat Tree Breakdown in key management enabling attacker access to keys Protected Key Storage Key Management Practices Customer infrastructure compromised Link: Threat Tree Breakdown in key management enabling attacker access to keys Protected Key Storage Key Management Practices Legend: Root Risk Event Conditions Technical Controls Process Controls Consumer Applied Control

14 REGIONAL INDUSTRY US GOV GLOBAL March 2017 ISO ISO ISO ISO ISO 9001 SOC 1 Type 2 SOC 2 Type 2 SOC 3 CSA STAR Self-Assessment CSA STAR Certification CSA STAR Attestation Moderate JAB P-ATO High JAB P-ATO DoD DISA SRG Level 2 DoD DISA SRG Level 4 DoD DISA SRG Level 5 SP FIPS Section 508 VPAT ITAR CJIS IRS 1075 PCI DSS Level 1 CDSA MPAA FACT UK Shared Assessments FISC Japan HIPAA / HITECH Act HITRUST GxP 21 CFR Part 11 MARS-E IG Toolkit UK FERPA GLBA FFIEC Argentina PDPA EU Model Clauses UK G-Cloud China DJCP China GB China TRUCS Singapore MTCS Australia IRAP/CCSL New Zealand GCIO Japan My Number Act ENISA IAF Japan CS Mark Gold Spain ENS Spain DPA India MeitY Canada Privacy Laws Privacy Shield Germany IT Grundschutz workbook

15 What if?

16 Security, Privacy & Control, Compliance, Transparency, Reliability

17 What s next?

18

19

20 Entity linking Bing news search Customer feedback analysis Speech Bing image search Speech API Forecasting Language Recommendation API Custom recognition (CRIS) Machine Learning Text to speech Text analytics Thumbnail generation Cognitive Services APIs Academic knowledge Spell check Web language model Knowledge Bing autosuggest Computer vision Vision Emotion Anomaly detection Sentiment scoring Search OCR, tagging, captioning Bing web search

21

22 Be Safe!

23 Weiterführende Links Microsoft Cloud Assurance: Trust-Center: Trust-Portal: SecureScore: ( nxwlm5nc) Security & Compliance Center Audit Controls: